[Ejbca-develop] Regarding EJBCA SCEP support level

[Ou J. (ojin) <oj...@ci...>]

Hi, EJBCA experts

We are trying to set up EJBCA as CA server in our solution. When I'm reading the document I have some questions about the SCEP support.

>From EJBCA Admin guide, I saw the section of "Level of SCEP support" writes:
"EJBCA implements features from (at least) draft 11 of the SCEP specification. This means that we implement the following SCEP messages:
PKCSReq
GetCRL
GetCACert
GetCACertChain
GetCACaps"

As draft 11 is relatively old version and given the messages listed, it seems like EJBCA doesn't support CA key rollover. Is that correct? I'm not sure whether this part of document is up-to-date or not. I went through release notes but didn't get a clear picture. If something has changed, could you please provide the list of SCEP support for current 6.2 version? Thanks a lot.

Definitely we'll set up EJBCA and do some investigation. But it'll be great to get first-hand info from you. Your help is really appreciated.

Regards,
Ou